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1 DETAILED ACTION 

2 

3 Claims 1, 2, 5, 7, 8, 11, 13-23 are pending. 

4 All objections and rejections not set forth below have been withdrawn. 
5 

6 The text of those sections of Title 35, U.S. Code not included in this action can 

7 be found in a prior Office action. 
8 

9 Claim Rejections - 35 USC § 103 

10 

1 1 Claims 1,2,5,7,8,11, 13-23 are rejected under 35 U.S.C. 103(a) as being 



12 unpatentable over Shear et al. (Shear), "Systems and Methods Using 

1 3 Cryptography to Protect Secure Computing Environments", U.S. Patent 6,157,721 

1 4 in view of Bodrov, "System and Method of Verifying The Authenticity of 

1 5 Dynamically Connectable Executable Images", U.S. Patent 6,802,006. 

16 

1 7 Regarding claim 1 , Shear discloses: 

1 8 a primary library file, the primary library file having a digital signature (Shear, 

1 9 1 :26-28; 2:46-3:3; 4:21-67; Herein, Shear discloses, system protection by verifying the 

20 digital signatures of basic executables - thus at least one executable module or 

21 "primary library file" - of a software installation, for example a virtual machine 
' 22 installation). 
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1 a loader program that obtains a digital signature key and further loads the 

2 primary library file (Shear, fig. 1:61; 5:1-5; 6:6-11; fig. 3- Herein, Shear discloses a 

3 device comprising a programmed execution environment that loads code - thus a 

4 "loader" program - for loading and executing software instructions, also see load 

5 module" - "an executable unit of code loaded into memory by the loader" - Microsoft 

6 Press Computer Dictionary, 3 rd ed., pg. 287); wherein, if a public key cannot be 

7 obtained via a virtual machine provider, the digital signature key is a hidden public key 

8 internal to the loader program and, if a public key can be obtained via the virtual 

9 machine provider, the digital signature key is the public key obtained via the virtual 

10 machine provider (Shear, 13:65-14:5; 5:1-5; Herein, Shear discloses both obtaining a 

1 1 hidden public key and obtaining a certificate from the software provider). 

12 Shear discloses that an execution environment may execute a plurality of 

1 3 software modules, having digital signatures, of which are verified for authenticity by the 

14 programmed execution environment (Shear, 4:1-60), and which may interact with other 

1 5 installed software modules (Shear,3:24-35). Shear however does not explicitly disclose 

16 that one installed software module "interacts" other installed software modules via a first 

1 7 module "referencing" second modules from the plurality of modules. 

18 Bodrov discloses that software modules, such as digitally signed DLL's defining a 

19 software installation, interact via one module referencing another module to be loaded 

20 and verified by the loader program (Bodrov, fig. 2; 3:12-24). 

21 It would have been obvious to one of ordinary skill in the art to employ the 

22 method of Bodrov for interaction between software modules of a software installation - 
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1 within the system of Shear. This would have been obvious, because one of ordinary 

2 skill in the art would have been motivated to utilize a practical way for software modules 

3 to interact. 

4 wherein the loader program is verifesand selectively loads the primary library file 

5 by comparing the obtained digital signature key with the digital signature of the primary 

6 library file, the primary library file subsequently verifying and selectively loading the 

7 plurality of secondary files by calling the loader program to compare the obtained digital 

8 signature key with the digital signature of each of the plurality of secondary files, 

9 wherein the computer software is a virtual machine installation (Shear, fig. 3; 6:5-1 5; 
10 Bodrov, fig. 1). 

11 

12 Regarding claim 2, the combination of Shear and Bodrov enables a plurality of 

13 software modules (i.e: DLL files), wherein at least one module references a plurality of 

14 secondary modules, and wherein all modules are loaded and verified (See above 

15 rejection). However, the combination does not disclose that a referenced secondary 

16 module may reference another, or 3 rd , module. However, it was well known to those of 

17 ordinary skill in the art that a referenced module (i.e. DLL), may reference another 

18 module (i.e. DLL). 
19 

20 Regarding claim 5, the combination of Shear and Bodrov enables: 

21 at least one administrator-configurable file (Shear, fig. 1 :52,64; 3:32-35; 4:38,39 

22 - the combination disclose files that are configured by administrators). 
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1 the digital signature key comprising a number of keys including a private key 

2 provided by an administrator (Shear, fig. 7, 8) 

3 wherein the loader program verifies the digital signature of the at least one 

4 administrator-configurable file using the private key (see above rejections - all files are 

5 verified). 
6 

7 Regarding claim 14, the combination of Shear and Bodrov enables: 

8 the virtual machine provider is accessed through an internet site to provide the 

9 public key (Shear, fig. 1 ; Abstract; 2:33-40; 3:10-15, 21-35; 5:3-5). The combination 

10 teaches obtaining certificate-bearing code from the virtual machine provider via the 

1 1 Internet. Therefore the combination enables the provision of the public key by such 

12 means (for definition of a certificate, see Microsoft Computer Dictionary, pg. 93). 
13 

14 Regarding claim 16, the combination of Shear and Bodrov enables: 

1 5 wherein the primary library file is a virtual machine dynamic link library file 

16 (Shear, 2:54-3:3; Bodrov, fig. 1) 
17 

1 8 Regarding claim 1 8, the combination of Shear and Bodrov enables: 

1 9 wherein the loader program is a third-party application that initiates the virtual 

20 machine installation (Shear, fig. 1 :61 ; fig. 3; Bodrov, fig. 1 :95). 
21 

22 Regarding claim 19, the combination of Shear and Bodrov enables: 
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1 wherein the loader program is a virtual machine launcher that initiates the virtual 

2 machine installation (Shear, 2:54-3:3; 4:36-40; Bodrov, fig. 1). 
3 

4 Regarding claims 7, 8, 1 1 , 1 3, 1 5, 1 7, 20, and 21 , they are method claims 

5 corresponding to the above rejected claims and contain essentially similar limitations, 

6 and they are rejected, at least, for the same reasons. Furthermore, the combination 

7 enables "launching a loader program" (Shear, fig. 3; Bodrov, fig. 1). 
8 

9 Regarding claims 22 and 23, they are system claims corresponding to the above 

10 rejected claims and contain essentially similar limitations, and they are rejected, at least, 

1 1 for the same reasons. 
12 

1 3 Rsponse to Arguments 

14 

1 5 Applicant's arguments filed 2/9/07 have been fully considered but they are not 

16 persuasive. 
17 

1 8 Applicant argues or asserts primarily that: 

19 

20 (i) Shear, in Figure 3, does not show a loader program that verifies and selectively 

2 1 loads the primary library file nor the primary library file subsequently verifying and 

22 selectively loading a plurality of files. . . 
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1 Bodrov does not disclose or suggest "the loader program verifies and selectively 

2 loads the primary library file" or "the primary library file subsequently verifying and 

3 selectively loading the plurality of secondary files. " (Remarks, pg. 1 0, par. 1 ; pg. 1 1 , 

4 par. 1) 
5 

6 In response, the examiner respectfully notes that prior art demonstrates a loader 

7 program that verifies and selectively loads. Shear discloses the loading and execution 

8 of a load module (for example, see fig. 3 - the examiner asserts that the man inside the 

9 computer who verifies and loads the load module is symbolic. As evidenced by the 

10 Microsoft Press Computer Dictionary , a "loader program" is what loads the load 

1 1 module). Furthermore, Bodrov is completely in harmony with Shear. Bodrov illustrates, 

12 without symbolism, the term "program loader" (for example, see fig. 2). 

1 3 Additionally, the examiner points out that the combination of Shear and Bodrov 

1 4 shows a "primary library file subsequently verifying and selectively loading a plurality of 

1 5 files [by calling the loader program to..." - as per claim recitation] (Shear, fig. 3; 6:5- 

16 15; Bodrov, fig. 1). In response to applicant's arguments against the references 

1 7 individually, one cannot show nonobviousness by attacking references individually 

18 where the rejections are based on combinations of references. See In re Keller, 642 

19 F. 2d 413, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 

20 USPQ 375 (Fed. Cir. 1986). 
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1 (ii) Claims 14 and 15 recite "the virtual machine provider is accessed through an 

2 internet site to provide the public key." Shear, in the abstract, Figure 1 , or elsewhere, 

3 does not disclose this limitation. (Remarks, pg. 12, par. 5) 
4 

5 In response, the examiner respectfully notes the claims 14 and 15 essentially 

6 comprise descriptive language. A recitation that does not require performing an access 

7 of a key, but is instead a characterization of a non required condition "if a public key is 

8 available from an internet site", or "if a public key can be obtained via the virtual 

9 However, it is respectfully noted that, were such descriptive language to 

10 comprise a claim limitation, the prior art is shown to enable the "Virtual machine 

1 1 provider" to be accessed to provide a public key via an internet. 
12 

1 3 Conclusion 

14 

1 5 The prior art made of record and not relied upon is considered pertinent to 

16 applicant's disclosure. 
17 

18 See Notice of References Cited. 

19 

20 THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 

21 policy as set forth in 37 CFR 1.136(a). 
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1 A shortened statutory period for reply to this final action is set to expire. THREE 

2 MONTHS from the mailing date of this action. In the event a first reply is filed within 

3 TWO MONTHS of the mailing date of this final action and the advisory action is not 

4 mailed until after the end of the THREE-MONTH shortened statutory period, then the 

5 shortened statutory period will expire on the date the advisory action is mailed, and any 

6 extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 

7 the advisory action. In no event, however, will the statutory period for reply expire later 

8 than SIX MONTHS from the mailing date of this final action. 
9 

1 0 Any inquiry concerning this communication or earlier communications from the 

1 1 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

12 7965. The examiner can normally be reached on 8:30-5:00. 

1 3 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

14 supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 

1 5 number for the organization where this application or proceeding is assigned is (703) 

16 872-9306. 
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Information regarding the status of an application may be obtained from the 



2 Patent Application Information Retrieval (PAIR) system. Status information for 

3 published applications may be obtained from either Private PAIR or Public PAIR. 

4 Status information for unpublished applications is available through Private PAIR only. 

5 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

6 you have questions on access to the Private PAIR system, contact the Electronic 

7 Business Center (EBC) at 866-21 7-91 97 (toll-free). 



8 
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10 
11 
12 
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